Recognizing and Declining Requests for Personal Information